system32.exe? what is this file for? norton AV quarantened it

[Guest]

hi, what is system32.exe used for? I had a number of files quarantened by norton antivirus and now everytime I load XP a box comes up saying that system32.exe faield to run as it is not there. any ideas how to fix this problem other than re installing and using sfc?

 

[Guest]

system32.exe is a virus....go here and do an online virus check up http://housecall.trendmicro.com/ it will check it and clean it for you... you can also do this...

1.live update your norton (recomended but isn't important...
2. star your windows on safe mode - press F8 when the computer starts and choose safe mode
3.click start-run-type "regedit" - click o
open: HKEY_Local_Machine then Software\Microsoft\Windows Nt\CurrentVersion\Winlogon
4. on the right side of the menu box scroll down and find "shell" and double click it
change the text in the box so it shows
"Explorer.exe
close all aplications and restart the computer
press F8 again when the computer shows it's stats only this time chose
"start windows normally

 

[Guest]

thanks for the reply, will do it asap.

 

[Bruce Chambers]

Greetings --

System32.exe is _not_ a valid Windows file, but rather a file name
commonly used for a component of several well-known viruses, worms,
and Trojans.

To name a few:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

W32.Mari.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Backdoor.SysXXX
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

Backdoor.Miranda
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.miranda.html

W32.Kitro.A.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kitro.a.worm.html

W32.HHLW.Logpole.C
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html

Backdoor.Darksun
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.darksun.html

W32.Trilisa.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Additionally, MS-MVP Doug Knox has kindly scripted a tool that
could help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH